General

  • Target

    4ea1078254cc39cac3ab0a51fd7514cc232daa1655f507a58ddbdaf94c70b495

  • Size

    21.2MB

  • MD5

    ce6ccd2793a548a8de28679f5ab008ec

  • SHA1

    307185f0c6885c065230b6f630c19466b83d9917

  • SHA256

    4ea1078254cc39cac3ab0a51fd7514cc232daa1655f507a58ddbdaf94c70b495

  • SHA512

    ef8867d6df13e0da3306c8380b02a461174cbebcf360ad6eaf0932264ee12c31a63549e501b025a2774af929b1cbf276e51a2d7bf07ffa205afaa52d6ae34d60

  • SSDEEP

    393216:Lnbnqy10W68qEkKZTgHyqXyRtItvNApgaXSEo7q3ZF4lNIVzWy45/HxpIG89sqvc:fl96fiZ0HvW2Qg/ROViLRpIG89sCjjqr

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 4ea1078254cc39cac3ab0a51fd7514cc232daa1655f507a58ddbdaf94c70b495
    .pps windows office2003

    Kangatang

    ThisWorkbook